Privilege Role Sign-In Outside Expected Controls — Detection Rule

Detects failed sign-in due to user not meeting expected controls for adminitrators

Read the full analysis on IntelFusions